Microsoft Azure · Management

Defender External Attack Surface Management

Microsoft Defender External Attack Surface Management scans your public-facing infrastructure to find every internet-exposed resource. It maps out the external attack surface, identifying assets you might not know are visible to attackers. This discovery process helps secure the digital experience by revealing shadow IT and forgotten endpoints that need attention.

This service suits organizations already in the Azure ecosystem needing visibility beyond their internal perimeter. It operates on a strict pay-as-you-go model, meaning costs scale directly with usage. There is no free tier available, so you must budget for continuous scanning from day one, making it less appealing for teams wanting to test the waters without immediate financial commitment.

• Free tier No
• Pricing Pay as you go
• Regions 12 · 6 continents
• SLA uptime 99.99%
• Compliance 13 certifications
• Provider health A